Microsoft Windows EFSRPC Arbitrary File Upload / Privilege Escalation

Discussion in 'News Aggregator' started by Packet Storm, 14 Jan 2022.

  1. Packet Storm

    Packet Storm Guest

    The EFSRPC service on Microsoft Windows Server versions 2019 and 2022 does not prevent a caller specifying a local device path allowing any authenticated user to upload arbitrary files to a server.

    Continue reading...
     
    #1 Packet Storm, 14 Jan 2022
(You must log in or sign up to post here.)

Share This Page

Loading...